better-auth 1.6.23 → 1.6.24

package/dist/plugins/one-tap/client.d.mts

@@ -1,7 +1,4 @@
-import * as _better_auth_core0 from "@better-auth/core";
 import { ClientFetchOption } from "@better-auth/core";
-import * as _better_fetch_fetch0 from "@better-fetch/fetch";
-
 //#region src/plugins/one-tap/client.d.ts
 declare global {
   interface Window {
@@ -162,13 +159,13 @@ declare const oneTapClient: (options: GoogleOneTapOptions) => {
     id: string;
     name: string;
     hooks: {
-      onResponse(ctx: _better_fetch_fetch0.ResponseContext): Promise<void>;
+      onResponse(ctx: import("@better-fetch/fetch").ResponseContext): Promise<void>;
     };
   }[];
-  getActions: ($fetch: _better_fetch_fetch0.BetterFetch, _: _better_auth_core0.ClientStore) => {
+  getActions: ($fetch: import("@better-fetch/fetch").BetterFetch, _: import("@better-auth/core").ClientStore) => {
     oneTap: (opts?: GoogleOneTapActionOptions | undefined, fetchOptions?: ClientFetchOption | undefined) => Promise<void>;
   };
-  getAtoms($fetch: _better_fetch_fetch0.BetterFetch): {};
+  getAtoms($fetch: import("@better-fetch/fetch").BetterFetch): {};
 };
 //#endregion
 export { GoogleOneTapActionOptions, GoogleOneTapOptions, GsiButtonConfiguration, oneTapClient };

package/dist/plugins/one-tap/client.mjs

@@ -124,6 +124,9 @@ const oneTapClient = (options) => {
 							context: contextValue,
 							ux_mode: opts?.uxMode || "popup",
 							nonce: opts?.nonce,
+							/**
+							* @see {@link https://developers.google.com/identity/gsi/web/guides/overview}
+							*/
 							itp_support: true,
 							use_fedcm_for_prompt: useFedCM,
 							...options.additionalOptions

package/dist/plugins/one-tap/index.d.mts

@@ -1,6 +1,4 @@
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/one-tap/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -28,7 +26,7 @@ declare const oneTap: (options?: OneTapOptions | undefined) => {
   id: "one-tap";
   version: string;
   endpoints: {
-    oneTapCallback: better_call0.StrictEndpoint<"/one-tap/callback", {
+    oneTapCallback: import("better-call").StrictEndpoint<"/one-tap/callback", {
       method: "POST";
       body: z.ZodObject<{
         idToken: z.ZodString;

package/dist/plugins/one-tap/index.mjs

@@ -10,6 +10,11 @@ import * as z from "zod";
 //#region src/plugins/one-tap/index.ts
 const oneTapCallbackBodySchema = z.object({
 	idToken: z.string().meta({ description: "Google ID token, which the client obtains from the One Tap API" }),
+	/**
+	* Sent so the global origin-check middleware validates the post-login
+	* redirect target against `trustedOrigins`. Without it the client performs
+	* an unvalidated `window.location` redirect, which is an open redirect.
+	*/
 	callbackURL: z.string().meta({ description: "URL to redirect to after a successful sign-in" }).optional()
 });
 const oneTap = (options) => ({

package/dist/plugins/one-time-token/client.d.mts

@@ -1,5 +1,4 @@
 import { OneTimeTokenOptions, oneTimeToken } from "./index.mjs";
-
 //#region src/plugins/one-time-token/client.d.ts
 declare const oneTimeTokenClient: () => {
   id: "one-time-token";
@@ -7,4 +6,4 @@ declare const oneTimeTokenClient: () => {
   $InferServerPlugin: ReturnType<typeof oneTimeToken>;
 };
 //#endregion
-export { oneTimeTokenClient };
+export { type OneTimeTokenOptions, oneTimeTokenClient };

package/dist/plugins/one-time-token/index.d.mts

@@ -1,8 +1,7 @@
 import { Session, User } from "../../types/models.mjs";
+import "../../types/index.mjs";
 import { GenericEndpointContext } from "@better-auth/core";
-import * as better_call0 from "better-call";
 import * as z from "zod";
-
 //#region src/plugins/one-time-token/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -67,9 +66,9 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/one-time-token#api-method-one-time-token-generate)
      */
-    generateOneTimeToken: better_call0.StrictEndpoint<"/one-time-token/generate", {
+    generateOneTimeToken: import("better-call").StrictEndpoint<"/one-time-token/generate", {
       method: "GET";
-      use: ((inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<{
+      use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
         session: {
           session: Record<string, any> & {
             id: string;
@@ -110,7 +109,7 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
      *
      * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/one-time-token#api-method-one-time-token-verify)
      */
-    verifyOneTimeToken: better_call0.StrictEndpoint<"/one-time-token/verify", {
+    verifyOneTimeToken: import("better-call").StrictEndpoint<"/one-time-token/verify", {
       method: "POST";
       body: z.ZodObject<{
         token: z.ZodString;
@@ -123,7 +122,7 @@ declare const oneTimeToken: (options?: OneTimeTokenOptions | undefined) => {
   hooks: {
     after: {
       matcher: () => true;
-      handler: (inputContext: better_call0.MiddlewareInputContext<better_call0.MiddlewareOptions>) => Promise<void>;
+      handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
     }[];
   };
   options: OneTimeTokenOptions | undefined;

package/dist/plugins/one-time-token/index.mjs

@@ -32,6 +32,21 @@ const oneTimeToken = (options) => {
 		id: "one-time-token",
 		version: PACKAGE_VERSION,
 		endpoints: {
+			/**
+			* ### Endpoint
+			*
+			* GET `/one-time-token/generate`
+			*
+			* ### API Methods
+			*
+			* **server:**
+			* `auth.api.generateOneTimeToken`
+			*
+			* **client:**
+			* `authClient.oneTimeToken.generate`
+			*
+			* @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/one-time-token#api-method-one-time-token-generate)
+			*/
 			generateOneTimeToken: createAuthEndpoint("/one-time-token/generate", {
 				method: "GET",
 				use: [sessionMiddleware]
@@ -41,6 +56,21 @@ const oneTimeToken = (options) => {
 				const token = await generateToken(c, session);
 				return c.json({ token });
 			}),
+			/**
+			* ### Endpoint
+			*
+			* POST `/one-time-token/verify`
+			*
+			* ### API Methods
+			*
+			* **server:**
+			* `auth.api.verifyOneTimeToken`
+			*
+			* **client:**
+			* `authClient.oneTimeToken.verify`
+			*
+			* @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/one-time-token#api-method-one-time-token-verify)
+			*/
 			verifyOneTimeToken: createAuthEndpoint("/one-time-token/verify", {
 				method: "POST",
 				body: verifyOneTimeTokenBodySchema

package/dist/plugins/open-api/generator.d.mts

@@ -1,7 +1,6 @@
 import { AuthContext, BetterAuthOptions } from "@better-auth/core";
 import { DBFieldAttributeConfig, DBFieldType } from "@better-auth/core/db";
 import { OpenAPIParameter, OpenAPISchemaType } from "better-call";
-
 //#region src/plugins/open-api/generator.d.ts
 interface Path {
   get?: OpenAPIOperation | undefined;

package/dist/plugins/open-api/generator.mjs

@@ -2,7 +2,7 @@ import { db_exports } from "../../db/index.mjs";
 import { getEndpoints } from "../../api/index.mjs";
 import * as z from "zod";
 //#region src/plugins/open-api/generator.ts
-const OPEN_API_SCHEMA_TYPES = new Set([
+const OPEN_API_SCHEMA_TYPES = /* @__PURE__ */ new Set([
 	"string",
 	"number",
 	"boolean",
@@ -47,7 +47,7 @@ function withDescription(schema, zodType) {
 function addNullType(schema) {
 	if (schema.type) {
 		const type = Array.isArray(schema.type) ? schema.type : [schema.type];
-		const nullableType = Array.from(new Set([...type, "null"]));
+		const nullableType = Array.from(/* @__PURE__ */ new Set([...type, "null"]));
 		return {
 			...schema,
 			type: nullableType
@@ -134,7 +134,7 @@ function mergeObjectSchemas(left, right, description) {
 		if (properties[key] !== void 0 && !areSchemasEqual(properties[key], value)) return;
 		properties[key] = value;
 	}
-	const required = Array.from(new Set([...left.required || [], ...right.required || []]));
+	const required = Array.from(/* @__PURE__ */ new Set([...left.required || [], ...right.required || []]));
 	const leftAdditionalProperties = left.additionalProperties;
 	const rightAdditionalProperties = right.additionalProperties;
 	if (!areSchemaMembersCompatible(leftAdditionalProperties, rightAdditionalProperties)) return;
@@ -162,6 +162,82 @@ function getRequestBody(options) {
 		content: { "application/json": { schema } }
 	};
 }
+/**
+* Paths that accept `user.additionalFields` and plugin user schema fields via
+* `parseUserInput`. Their static OpenAPI request bodies need those fields merged in.
+*/
+const USER_INPUT_BODY_PATHS = /* @__PURE__ */ new Set(["/sign-up/email", "/update-user"]);
+function dbFieldToRequestBodyProperty(field) {
+	if (field.type === "date") return {
+		type: "string",
+		format: "date-time"
+	};
+	if (field.type === "json") return {
+		type: "object",
+		additionalProperties: true
+	};
+	if (field.type === "string[]") return {
+		type: "array",
+		items: { type: "string" }
+	};
+	if (field.type === "number[]") return {
+		type: "array",
+		items: { type: "number" }
+	};
+	if (Array.isArray(field.type)) return {
+		type: "string",
+		enum: field.type
+	};
+	const schema = { type: field.type };
+	if (field.defaultValue !== void 0 && typeof field.defaultValue !== "function") schema.default = field.defaultValue;
+	return schema;
+}
+/**
+* Collect client-writable user fields from `user.additionalFields` and plugin
+* schemas. Mirrors `getFields(..., "input")` used by `parseUserInput`.
+*/
+function getUserInputRequestBodyFields(options) {
+	let fields = { ...options.user?.additionalFields ?? {} };
+	for (const plugin of options.plugins || []) {
+		const pluginUserFields = plugin.schema?.user?.fields;
+		if (pluginUserFields) fields = {
+			...fields,
+			...pluginUserFields
+		};
+	}
+	const properties = {};
+	const required = [];
+	for (const [key, field] of Object.entries(fields)) {
+		if (!field || field.input === false) continue;
+		properties[key] = dbFieldToRequestBodyProperty(field);
+		if (field.required === true && field.defaultValue === void 0) required.push(key);
+	}
+	return {
+		properties,
+		required
+	};
+}
+function applyUserInputFieldsToRequestBody(path, requestBody, options) {
+	if (!USER_INPUT_BODY_PATHS.has(path)) return requestBody;
+	const { properties: inputProperties, required: inputRequired } = getUserInputRequestBodyFields(options);
+	if (Object.keys(inputProperties).length === 0) return requestBody;
+	const existingSchema = requestBody?.content?.["application/json"]?.schema;
+	const properties = { ...existingSchema?.properties ?? {} };
+	for (const [key, value] of Object.entries(inputProperties)) if (properties[key] === void 0) properties[key] = value;
+	const required = new Set(existingSchema?.required ?? []);
+	if (path === "/sign-up/email") {
+		for (const key of inputRequired) if (properties[key] !== void 0) required.add(key);
+	}
+	return {
+		...requestBody,
+		content: { "application/json": { schema: {
+			...existingSchema ?? {},
+			type: existingSchema?.type ?? "object",
+			properties,
+			...required.size > 0 ? { required: Array.from(required) } : {}
+		} } }
+	};
+}
 function toOpenApiSchema(zodType) {
 	if (zodType instanceof z.ZodOptional) return toOpenApiSchema(unwrapZodSchema(zodType));
 	if (zodType instanceof z.ZodNullable) return addNullType(toOpenApiSchema(unwrapZodSchema(zodType)));
@@ -323,7 +399,7 @@ async function generator(ctx, options) {
 	const components = { schemas: { ...Object.entries(tables).reduce((acc, [key, value]) => {
 		const modelName = key.charAt(0).toUpperCase() + key.slice(1);
 		const fields = value.fields;
-		const required = new Set(["id"]);
+		const required = /* @__PURE__ */ new Set(["id"]);
 		const properties = { id: {
 			type: "string",
 			readOnly: true
@@ -366,7 +442,7 @@ async function generator(ctx, options) {
 			}
 		};
 		for (const method of methods.filter((m) => m === "POST" || m === "PATCH" || m === "PUT")) {
-			const body = getRequestBody(options);
+			const body = applyUserInputFieldsToRequestBody(value.path, getRequestBody(options), ctx.options);
 			paths[path] = {
 				...paths[path],
 				[method.toLowerCase()]: {

package/dist/plugins/open-api/index.d.mts

@@ -1,7 +1,5 @@
 import { FieldSchema, OpenAPIModelSchema, OpenAPIParameter, OpenAPISchema, Path, generator } from "./generator.mjs";
 import { LiteralString } from "@better-auth/core";
-import * as better_call0 from "better-call";
-
 //#region src/plugins/open-api/index.d.ts
 declare module "@better-auth/core" {
   interface BetterAuthPluginRegistry<AuthOptions, Options> {
@@ -44,7 +42,7 @@ declare const openAPI: <O extends OpenAPIOptions>(options?: O | undefined) => {
   id: "open-api";
   version: string;
   endpoints: {
-    generateOpenAPISchema: better_call0.StrictEndpoint<"/open-api/generate-schema", {
+    generateOpenAPISchema: import("better-call").StrictEndpoint<"/open-api/generate-schema", {
       method: "GET";
     }, {
       openapi: string;
@@ -84,7 +82,7 @@ declare const openAPI: <O extends OpenAPIOptions>(options?: O | undefined) => {
       }[];
       paths: Record<string, Path>;
     }>;
-    openAPIReference: better_call0.StrictEndpoint<LiteralString | "/reference", {
+    openAPIReference: import("better-call").StrictEndpoint<LiteralString | "/reference", {
       method: "GET";
       metadata: {
         readonly scope: "server";
@@ -94,4 +92,4 @@ declare const openAPI: <O extends OpenAPIOptions>(options?: O | undefined) => {
   options: NoInfer<O>;
 };
 //#endregion
-export { type FieldSchema, type OpenAPIModelSchema, OpenAPIOptions, OpenAPIParameter, OpenAPISchema, type Path, generator, openAPI };
+export { type FieldSchema, type OpenAPIModelSchema, OpenAPIOptions, type OpenAPIParameter, type OpenAPISchema, type Path, type generator, openAPI };

package/dist/plugins/organization/access/statement.d.mts

@@ -1,4 +1,5 @@
 import { ExactRoleStatements, Role, RoleInput, Statements } from "../../access/types.mjs";
+import "../../index.mjs";
 //#region src/plugins/organization/access/statement.d.ts
 declare const defaultStatements: {
   readonly organization: readonly ["update", "delete"];